1. Data controller
The FactoryDepo platform at www.factorydepo.com (the "Platform") is operated by LILART TEKNOLOJİ YAZILIM İTHALAT İHRACAT VE TİCARET ANONİM ŞİRKETİ (MERSİS: 0608187591100001, tax ID: 6081875911, address: Vadistanbul Park Sit. 7C Blok No:7D İç Kapı No:15 Sarıyer/İstanbul, email: info@lilart.tech). This notice is given in its capacity as data controller under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
2. Who it covers
Visitors to the Platform, buyer account holders, seller account holders and their representatives, people who send quote requests and people who place orders.
3. Personal data processed
- Identity: first name and surname.
- Contact: email address, telephone number, delivery and billing address.
- Customer transactions: quote requests, orders, messages, saved products and listings viewed with your account.
- Transaction security: an irreversible hash of your password, session information, IP address and system logs.
- Business information: company name, country, tax or registration number and importer declaration. For sole proprietorships this information is personal data.
- Finance: order amount and payment status. Card details are entered on the payment institution's page; FactoryDepo does not see or store them.
- Preferences: interface language and display currency.
4. Purposes
- Opening and managing accounts and signing you in.
- Passing your quote requests to the seller concerned or to the FactoryDepo team, and answering them.
- Creating orders, collecting payments, planning shipments and delivering them.
- Verifying seller accounts and reviewing listings.
- Invoicing and meeting retention and reporting duties under the law.
- Keeping the Platform secure, preventing abuse and fraud, and applying request limits.
- Handling requests, complaints and legal disputes.
5. Legal grounds
Your personal data is processed on these legal grounds under KVKK Article 5(2):
- It is directly related to concluding or performing a contract (Art. 5(2)(c)): accounts, quote requests, orders, payment and delivery.
- It is necessary for the data controller to meet a legal obligation (Art. 5(2)(ç)): invoices, commercial books and records, information to competent authorities.
- It is necessary to establish, exercise or protect a right (Art. 5(2)(e)): disputes.
- It is necessary for the data controller's legitimate interests, provided your fundamental rights and freedoms are not harmed (Art. 5(2)(f)): security logs and abuse prevention.
Commercial electronic messages for promotion are sent only on the basis of your consent obtained under Turkish Law No. 6563; you may withdraw it at any time.
6. How it is collected
Your personal data is collected electronically through forms on the Platform, account and order screens, email correspondence, and quote requests you send to FactoryDepo through İhaleZeka, which is operated by the same company as FactoryDepo. IP addresses and system logs are collected automatically while you use the Platform.
7. Transfers within Türkiye
Your personal data is transferred to the following recipients to the extent needed for the purposes above:
- The seller you request a quote from or order from: the contact and delivery details needed to fulfil the request or order.
- The payment institution: the order and payment details needed to collect payment.
- Shipping and logistics companies: the delivery details needed for the shipment.
- Legal, accounting and audit service providers: to the extent those services require.
- Competent public authorities: where the law requires.
Because İhaleZeka is also operated by LILART A.Ş., requests you send to FactoryDepo through İhaleZeka stay within the same data controller; this is not a transfer to a third party.
8. Transfers abroad
The Platform's hosting, email delivery and file storage services are provided by service providers located abroad. Completion of the cross-border transfer mechanism for these providers has not yet been verified. This notice does not mean that a standard contract has been signed or notified to the Authority. The applicable transfer conditions under KVKK Article 9 must be met and documented.
When you order from a seller or supply source abroad, or choose an international shipment, the contact and delivery details needed to perform the order are transferred to that seller, supply source and carrier under KVKK Article 9(6)(b), occasionally and because it is necessary to perform the contract with you.
9. Retention
Your personal data is kept for as long as the purpose requires and for the periods the law sets (for example 10 years for commercial books and documents under Article 82 of Turkish Commercial Code No. 6102 and 5 years under Article 253 of Tax Procedure Law No. 213), and for the limitation periods of possible disputes. At the end of these periods it is deleted, destroyed or anonymised.
10. Cookies and browser storage
The Platform does not use advertising or visitor analytics cookies. The display currency you choose is kept in a cookie (fd_ccy); your session and interface language are kept in your browser's local storage. These are needed for the Platform to work the way you asked.
11. Your rights
Under KVKK Article 11 you have the right to learn whether your personal data is processed; to request information if it is; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction when the conditions of KVKK Article 7 are met, and notification of these actions to the third parties it was transferred to; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
12. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your application in writing to Vadistanbul Park Sit. 7C Blok No:7D İç Kapı No:15 Sarıyer/İstanbul, with a secure electronic or mobile signature, or to info@lilart.tech from the email address you previously gave FactoryDepo and that is registered in our system. The application must state your name and surname, your signature if it is in writing, your Turkish identity number (or, for foreign nationals, nationality and passport or identity number), an address or email address for notification, and the subject of the request.
Your application is concluded free of charge as soon as possible according to its nature and within 30 days at the latest. If the action requires an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.
13. Updates
This notice is updated when our processing changes. The current version and its publication date are shown on this page.